CVE-2022-0930

File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12...

CVE-2022-0930

CVE-2022-0930 affects microweber/microweber. The issue is a file upload filter bypass that allows stored XSS via uploaded HTML-like files, reported for versions prior to 1.2.12. The root cause is inadequate validation/filtration of uploads enabling JavaScript execution on access. Remediation per ...

CVE-2022-0930 File upload filter bypass leading to stored XSS in microweber/microweber

File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12...

CVE-2022-0930 File upload filter bypass leading to stored XSS in microweber/microweber

File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12...

CVE-2022-0929

XSS on dynamictext module in GitHub repository microweber/microweber prior to 1.2.11...

CVE-2022-0929

XSS on dynamictext module in GitHub repository microweber/microweber prior to 1.2.11...

Cross site scripting

XSS on dynamictext module in GitHub repository microweber/microweber prior to 1.2.11...

CVE-2022-0929 XSS on dynamic_text module in microweber/microweber

XSS on dynamictext module in GitHub repository microweber/microweber prior to 1.2.11...

CVE-2022-0929 XSS on dynamic_text module in microweber/microweber

XSS on dynamictext module in GitHub repository microweber/microweber prior to 1.2.11...

CVE-2022-0929

The CVE-2022-0929 issue affects microweber/microweber, specifically the dynamic_text module. Reported as a cross-site scripting (XSS) vulnerability in the dynamic_text component, with vulnerable versions noted as prior to 1.2.11 (and related advisories referencing up to 1.2.12). The root cause is...

CVE-2022-0926

File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12...

CVE-2022-0926

File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12...

Unrestricted file upload

File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12...

CVE-2022-0926

The CVE-2022-0926 entry concerns Microweber (microweber/microweber). A vulnerability in the file upload filter allows bypassing input validation, leading to stored XSS. Affected version range: prior to 1.2.12. The root cause is improper validation in the file upload handling, enabling injection o...

CVE-2022-0926 File upload filter bypass leading to stored XSS in microweber/microweber

File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12...

CVE-2022-0926 File upload filter bypass leading to stored XSS in microweber/microweber

File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12...

GHSA-C383-Q5VF-HX55 Integer Overflow or Wraparound in Microweber

Microweber prior to 1.2.12 is vulnerable to Integer Overflow or Wraparound...

Integer Overflow or Wraparound in Microweber

Microweber prior to 1.2.12 is vulnerable to Integer Overflow or Wraparound...

Cross-site Scripting in microweber

Microweber drag and drop website builder and CMS with e-commerce. Cross-site Scripting XSS discovered in microweber prior to 1.2.12. There is currently no known workaround, users are recommended to update to version 1.2.12...

GHSA-JJP3-M93H-5JM4 Cross-site Scripting in microweber

Microweber drag and drop website builder and CMS with e-commerce. Cross-site Scripting XSS discovered in microweber prior to 1.2.12. There is currently no known workaround, users are recommended to update to version 1.2.12...